
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/17BA5658D1FA11EDA0A31C2FC4F9AE02.roa
File: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (raw, json)
Hash identifier: LIB+jPRrNcX48j1VF+KjCprRK7AM8JBY+SFqwnYaTaQ=
Subject key identifier: 63:67:33:05:C3:C3:C2:C3:C7:67:5A:C2:C5:B9:A2:D2:28:C4:97:1C
Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118
Certificate serial: 0D16
Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/17BA5658D1FA11EDA0A31C2FC4F9AE02.roa
Signing time: Wed 16 Sep 2026 18:36:36 +0000
ROA not before: Wed 16 Sep 2026 18:36:36 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 139326
IP address blocks: 103.141.70.0/23 maxlen: 23
103.141.70.0/24 maxlen: 24
103.141.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl
rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3350 (0xd16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118
Validity
Not Before: Sep 16 18:36:36 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aaae1b4-41f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:78:8a:de:1a:05:d9:14:06:11:3e:20:72:
79:c8:71:1e:40:1e:1a:e3:b2:fe:d1:4d:4f:10:d1:
aa:3c:43:22:01:71:44:ed:f8:50:5d:88:5b:41:e0:
70:a6:c8:9e:9c:5c:5b:d8:4c:89:4d:dc:04:48:e6:
ff:26:df:11:0f:45:ae:07:48:f8:37:5b:68:d3:49:
83:a9:25:f3:36:a4:d3:b9:84:ee:b6:d6:38:79:e8:
d6:df:e9:45:3f:b0:b1:ec:3d:e7:a2:cf:e0:c4:82:
7b:32:80:cc:fa:e0:e8:1a:8b:f9:29:00:40:f1:af:
6d:d2:03:07:fc:b3:43:cc:76:db:b1:a1:0c:52:6e:
b5:76:6c:23:11:22:41:d0:e4:08:e1:61:64:a2:17:
69:31:a7:3e:55:97:0d:c8:a3:81:7b:0b:d7:06:dd:
81:2d:b7:ae:0a:05:47:2f:5a:7a:e6:33:56:38:b7:
71:7a:3e:78:78:e7:e6:a4:58:33:23:2f:c4:2d:68:
02:76:41:c3:52:99:5e:a4:51:e4:24:ca:e0:ac:45:
73:1c:b9:f2:6f:f2:3b:7b:ba:53:a9:d3:80:12:01:
ea:6f:a6:17:b9:70:a2:ce:dd:6d:41:36:e9:92:1a:
f5:57:c9:89:dc:7d:65:72:f2:f8:64:07:13:80:65:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:67:33:05:C3:C3:C2:C3:C7:67:5A:C2:C5:B9:A2:D2:28:C4:97:1C
X509v3 Authority Key Identifier:
keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/17BA5658D1FA11EDA0A31C2FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.70.0/23
Signature Algorithm: sha256WithRSAEncryption
13:e3:1a:5b:b8:26:aa:b8:05:27:5e:ad:1b:ca:fe:70:52:c1:
23:45:db:55:a7:39:6f:91:f8:ac:62:7e:0c:73:d0:d0:a5:b3:
2a:57:5c:0f:af:6c:28:cd:80:eb:e8:12:13:32:cb:e5:3c:b3:
64:82:b2:ac:86:23:62:08:9d:c7:78:4e:ac:9b:43:58:b4:46:
18:44:43:a8:f9:e3:43:df:9a:04:3c:b3:6c:a2:18:7c:3e:2e:
98:5d:34:f4:84:68:a6:16:a5:50:89:51:46:d8:c3:2f:7f:02:
2c:b3:f4:da:80:67:86:bb:df:3b:ed:72:9f:be:0f:21:4b:a9:
d1:7b:9f:b1:41:38:b9:19:bd:b6:6e:bc:d4:ee:4d:b8:9f:dc:
6a:b5:d0:eb:97:c8:3d:33:1c:c8:c4:c7:be:49:78:37:70:dd:
7c:42:17:97:3b:bf:ec:66:91:68:81:ab:21:ba:51:5a:6c:2c:
c8:7e:26:7f:03:3d:f4:3d:49:28:ee:14:d6:b6:fe:8f:99:e3:
da:6c:1d:06:41:9d:10:38:d5:c4:11:b4:fd:a5:67:ad:91:67:
28:44:00:5c:e1:fa:2c:d6:99:ba:d7:95:3a:ef:11:5e:39:13:
2c:45:86:75:6a:02:62:f4:bd:e5:0b:73:a2:ff:14:b2:2e:1c:
4c:48:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:05:23 2026 by rpki-client